Dental and medical offices

Patient data protected, and the HIPAA paperwork done.

Any practice covered by HIPAA, which includes most practices that bill insurance electronically, has to meet the Security Rule, no matter how small. We handle the technical side and write down what's in place so you can show it.

What we put in place

These are the pieces HIPAA expects to see, in plain words.

  1. A risk analysis

    Where patient data lives, who can reach it, and what could go wrong, written down. HIPAA requires this of every covered practice, and we review it with you every year.

  2. Access controls

    Every person has their own login. Screens lock when someone walks away. Former staff are shut off the same day.

  3. Backups that work

    Copies of your records kept off-site and test-restored on a schedule, so a dead server or a break-in doesn't stop you seeing patients.

  4. Encrypted devices

    Laptops and workstations are encrypted, so a stolen computer is a hardware loss and not a patient notice.

  5. Staff training

    A short session on fake emails, passwords, and what to do if something looks wrong, with a sign-in sheet for your records.

Before we touch any system with patient data, we sign a Business Associate Agreement with your practice.

Chiropractic, therapy, and veterinary clinics

Smaller clinics, same setup, with the rule matched to the clinic.

Chiropractic, physical therapy, and counseling

A two chair chiropractic office or a counseling practice that keeps records on a computer and bills insurance electronically is covered by the HIPAA Security Rule in full. There is no small practice exemption. We do the same risk analysis, separate logins, screen locks, encrypted devices, tested backups, and staff training with a sign-in sheet, sized for a smaller office.

Veterinary clinics

Animal records are not covered by HIPAA, but a clinic still runs on practice software that has to stay up, Wi-Fi that reaches the exam rooms and the treatment area, and card terminals that belong on their own network. We add cameras over the kennels and the lobby that you can check from home at night, with the footage kept in the building.

The proposed HIPAA Security Rule update

HHS has proposed making two-step login, encryption, a technology inventory, and a network map required at every practice. It is not final yet, but most of it is worth doing now. What it means for a small practice.

Renewing cyber insurance soon? The free readiness check asks the same questions underwriters do.

Who we fit, and who we don't

We fit

  • Dental, medical, chiropractic, therapy, and veterinary practices, with larger or multi-location practices reviewed before we quote
  • Practices using cloud or office-based practice software
  • Owners who want people who know their whole office

We don't fit

  • Hospitals and surgery centers
  • Practices that need someone on site or on the phone all day
  • Anyone looking for legal or compliance-officer services. We handle the technology and the records of it.

Stop being your own IT person.

Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.